EUVD-2026-94322

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

CVE-2026-98373 mm/hugetlb: preserve mremap address delta when skipping page tables

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

CVE-2026-98373

The Linux kernel contains a vulnerability in the mm/hugetlb component related to the move_hugetlb_page_tables() function. The root cause is an incorrect logic error where the function advances both source and destination addresses to the last entries of their respective page tables when a source ...

CVE-2026-98373 mm/hugetlb: preserve mremap address delta when skipping page tables

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

CVE-2026-98373

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

kernel: svcrdma: Reject inline replies that overflow the pull-up buffer

A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...

kernel: packet: use consistent hard_header_len in non-ring send paths

An out-of-bounds write problem was observed in packetsendmsgspkt in net/packet/afpacket.c in the Linux Kernel. In this flaw, AFPACKET hardheaderlen race may allow local privilege escalation...

kernel: vsock/vmci: fix UAF when peer resets connection during handshake

A flaw was found in the vsock/vmci component of the Linux kernel. A remote attacker could exploit a Use-After-Free UAF vulnerability when a peer resets a connection during the handshake process. This occurs because the system incorrectly handles reset packets, leading to a pending socket being le...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Exploit for Use After Free in Google Android

cve-2019-2215-oppo-a77t Utilizes CVE-2019-2215 Binder UAF...

cve-2026-23111-poc

CVE-2026-23111 Para más detalles, consulta notes.md Descripción Descripción del CVE de NIST Una comprobación lógica invertida en nftmapcatchallactivate provoca que el contador de referencia nftchain-use no se restaure cuando una operación DELSET es abortada. Esto permite desencadenar un UAF...

tetragon-dirtyfrag

tetragon-dirtyfrag Bloqueando la cadena de escalada de privilegios DirtyFrag de Linux CVE-2026-43284 / CVE-2026-43500 en tiempo de ejecución con una TracingPolicy de Cilium Tetragon. La política mata con SIGKILL la prueba de concepto pública en su paso de configuración del socket, antes de que...

CVE-2026-46331

CVE-2026-46331 pedit COW – Vulnerabilidad de Envenenamiento de Caché de Páginas en el Editor de Paquetes de Linux net/sched Resumen Ejecutivo CVE-2026-46331 apodado “pedit COW” es una falla local de escalada de privilegios en el kernel de Linux en el subsistema de control de tráfico. Un usuario n...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

CVE-2026-43494-PinTheft-PoC

SLEY — PoC de PinTheft CVE-2026-43494 Prueba de concepto — uid=1000raken → uid=0root después de ./sley en WSL2 6.6.87.2-microsoft-standard-WSL2 Prueba de concepto en un solo archivo para CVE-2026-43494 PinTheft: una escalada de privilegios local del kernel de Linux que encadena un error de conteo...

ICALL-GADGET

ICALL GADGET ABUSE FOR COMMUNICATION General info: this is in the windows kernel and it will allow us to communicate in our driver without being detected to by anticheats So I was scrolling around in IDA and found this image After further inspection we can see that it calls a function called...

KernelFlirt

KernelFlirt Windows kernel-level debugger with an OllyDbg/IDA Pro-style interface. Designed for security research, reverse engineering, and malware analysis in VM environments VMware. Architecture Host machine VM Windows 10, testsigning ┌──────────────────┐ TCP:31337 ┌──────────────────┐ IOCTL...

COPY-FAIL

Copy Fail -- CVE-2026-31431 Implementación robusta en C para operaciones de redteam y pruebas de penetración autorizadas. ⚠️ Aviso legal: Esta herramienta está destinada exclusivamente para investigación de seguridad autorizada, pruebas de penetración autorizadas y análisis defensivo. Úsela...

CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Multiple Local Privilege Escalation Vulnerabilities in Little Orbit GFAC Driver GFACSysx64.sys | ---|--- CVE IDs| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Vendor| Little Orbit Product| GamersFirst Anti-Cheat GFAC Driver GFACSysx64.sys Affected Versions| No version information is embedded in...

lenovo_y700_tb320fc_on_CVE-2025-21479

TB320FC Kernel Root — CVE-2025-21479 English | 简体中文 In-memory kernel privilege escalation for the Lenovo Legion Y700 2023 TB320FC , exploiting CVE-2025-21479 Qualcomm Adreno GPU SMMU vulnerability, with full root management provided by ReSukiSU. No bootloader unlock. No flashing. No PC required f...